DevSecOps Engineer

Tradeify; Northern (KY); Hybrid; USD 120,000 - 190,000; Full time

Job summary

Tradeify is seeking a hands-on DevOps/SecOps Engineer to own the infrastructure, CI/CD pipelines, and security posture behind our trading platform. You will split time between shipping infrastructure improvements and running security practices to protect trader data and platform integrity.

This role offers fully remote work for a US-based candidate, reporting to the Head of Engineering / CTO. You will collaborate with engineering and leadership to turn security and reliability into a competitive

Qualifications

• Hands-on DevOps and security operations experience.
• Production AWS experience (EC2, S3, IAM).
• Dockerfiles and Compose configurations knowledge.

Responsibilities

• Design, build, and maintain CI/CD pipelines across services and repositories.
• Manage and scale AWS-based infrastructure.
• Own containerized deployments and TLS termination.
• Build and maintain infrastructure-as-code for repeatable provisioning.
• Improve observability: logging, metrics, tracing, and alerting.
• Support database operations (PostgreSQL, Redis) including backups.
• Own vulnerability management and remediation tracking.
• Enforce least-privilege access and secrets management.
• Build and monitor security detection and alerting.
• Lead incident response and postmortems.
• Support audit readiness for fintech regulations.
• Perform security reviews before deployments.
• Champion secure-by-default practices.
• Reduce deployment friction with engineering.

Skills

AWS

Docker

CI/CD

OIDC

Linux

Shell scripting

Incident response

Security fundamentals

PostgreSQL

Redis

Observability

Documentation

Tools

Kubernetes

Terraform

CloudFormation

GitHub Actions

Caddy

nginx

Job description

About Us

At Tradeify, we're building a high-performance trading ecosystem that empowers traders around the world with capital, technology, education, and community. We operate across futures and crypto markets and partner with platforms like NinjaTrader and Tradovate to deliver a best-in-class trading experience.

We're a rapidly scaling fintech serving a global trader community, and technology is at the center of everything we do. If you want to work on infrastructure and security where performance actually matters — where a 200ms lag on a dashboard is a real problem for real traders — this is a good place to do it.

About the Role

We are seeking a hands-on DevOps/SecOps Engineer to own the infrastructure, deployment pipelines, and security posture behind Tradeify's trading platform. This role splits evenly between building and hardening: shipping CI/CD and infrastructure improvements that let the engineering team move quickly, and running the security practices — monitoring, vulnerability management, incident response, compliance — that protect trader data and platform integrity.

This is a great opportunity for a DevOps/security professional to take real ownership of a live trading platform's infrastructure and security program, working closely with engineering and leadership to make both a competitive advantage rather than a bottleneck.

This role is fully remote (U.S.-based) and reports to the Head of Engineering / CTO.

What You Will Do

• Design, build, and maintain CI/CD pipelines (GitHub Actions + OIDC) across services and repositories.

• Manage and scale cloud infrastructure on AWS (EC2, S3, SES, ECR, Parameter Store, IAM).

• Own containerized deployments with Docker/Docker Compose, including reverse proxy and TLS termination (Caddy).

• Build and maintain infrastructure-as-code for repeatable, auditable environment provisioning.

• Improve observability across services — logging, metrics, tracing, and alerting for production systems.

• Support database operations (PostgreSQL, Redis) including backups, failover, and performance tuning.

• Own vulnerability management: scanning, triage, patching cadence, and remediation tracking across infrastructure and application layers.

• Design and enforce access control, secrets management, and least-privilege practices across cloud and CI/CD systems.

• Build and monitor security detection and alerting (intrusion detection, anomaly detection, log-based threat monitoring).

• Lead incident response: develop runbooks, coordinate response to security events, and drive postmortems.

• Support compliance and audit readiness relevant to a financial services/fintech environment.

• Perform security reviews of new infrastructure, integrations, and deployment changes before they ship.

• Champion secure-by-default practices across the engineering team (dependency hygiene, secrets scanning, hardened base images).

• Partner with engineering to reduce deployment friction and improve release reliability.

What You Bring

• Experience owning both infrastructure/DevOps and security operations responsibilities, or a strong track record in one with real depth in the other.

• Production experience with AWS (EC2, S3, IAM, ECR, Parameter Store or equivalent secrets management).

• Strong Docker/containerization experience, including writing and hardening Dockerfiles and Compose configurations.

• CI/CD pipeline design and maintenance (GitHub Actions or equivalent), including OIDC-based cloud authentication.

• Experience with vulnerability scanning, patch management, and remediation workflows.

• Solid understanding of network and application security fundamentals (TLS, firewalls, IAM, least privilege).

• Experience with PostgreSQL and Redis in production, including operational concerns (backups, monitoring, scaling).

• Comfort with Linux systems administration and shell scripting for automation.

• Incident response experience — able to lead through an active issue, not just document it after the fact.

• Independent work capability in a startup environment with high ownership and minimal hand-holding.

• Strong written communication — comfortable documenting runbooks, postmortems, and security findings clearly.

Nice To Have

• Fintech, trading, or other regulated-industry experience.

• Familiarity with the broader Tradeify stack: Next.js/React, Python/FastAPI, TypeScript, BullMQ + Redis for background jobs.

• Experience with SIEM tooling, SOC workflows, or managed detection and response platforms.

• Exposure to compliance frameworks (SOC 2, PCI DSS, or similar).

• Infrastructure-as-code tooling (Terraform, Pulumi, CloudFormation, or similar).

• Experience with reverse proxies and TLS automation (Caddy, nginx, Traefik).

• AI-assisted development workflow familiarity (Claude Code or similar).

Why Join Tradeify

• Join a professional-grade futures trading firm at a pivotal stage of growth.

• Real, fast-moving trading platform serving thousands of traders where performance and security genuinely matter.

• High ownership from day one — shape infrastructure and security practices rather than inherit rigid process.

• Small team structure with direct influence on architecture and tooling decisions.

• High-performance culture that rewards ownership, curiosity, and results.

• Competitive base salary, performance bonuses, and comprehensive benefits.

• Be a foundational member of the infrastructure and security function at a growing fintech company.

A Note on Our Hiring Process

At Tradeify Futures, we use AI-assisted tools as part of our recruiting process, which may include resume screening, application review, and candidate communication. We want all applicants to be aware of this upfront so you can make an informed decision about applying. Final hiring decisions are always made by a member of our team.